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I. INTRODUCTION 

Scientists around the world are striving toward 
the construction of a scalable quantum computer. 
Theorists can contribute to this effort by develop- 
ing and optimizing methods for protecting quan- 
tum computers against environmental decoherence 
and systematic hardware imperfections. Indeed, the 
theory of quantum fault tolerance [TJ |2] has estab- 
lished that reliable quantum computation is pos- 
sible if the noise afflicting the computer has suit- 
able properties. The most obvious requirement is 
that the noise must be sufficiently weak — if the 
noise strength is below a threshold of accuracy then 
quantum computing is scalable in principle. Re- 
cent insights have led to steadily improving esti- 
mates of the accuracy threshold, boosting confi- 
dence that large-scale quantum computers will be 
realized eventually. 

Notably, Knill proposed a scheme for fault- 
tolerant quantum computation based on concate- 
nated error-detecting codes and postselection, in 
which ancilla states are prepared off-line and an 
ancilla is discarded whenever an error is detected 
during its preparation. Numerical simulations indi- 
cate that Knill's scheme can tolerate independent 
stochastic noise with an error probability per gate 
of about 1% |4j, and a threshold error rate of order 
.1% has been rigorously established [5J Unfor- 
tunately, the overhead cost of Knill's postselection 
scheme is discouraging because ancillas are rarely 
accepted. However, Knill also proposed a modified 
version of the scheme with a more moderate over- 
head cost, which we call the "Fibonacci scheme." 
The Fibonacci scheme is based on the observation 
that a distance-2 code, aside from detecting errors, 
can also correct errors that occur at known positions 



in the code block; thus, in a concatenated code, de- 
tected errors at one coding level become located er- 
rors that can be corrected at the next level up. (We 
call it the Fibonacci scheme because the probability 
of a logical error scales with the coding level j like 
£^'-j\ where e is the noise strength and F{j) is a 
Fibonacci sequence.) Knill's numerical simulations 
indicate that the Fibonacci scheme, too, can toler- 
ate independent stochastic noise with an error rate 
of about 1% m. 

In this paper, we provide a rigorous analysis of 
the Fibonacci scheme. Our main result is a lower 
bound on the accuracy threshold for the Fibonacci 
scheme that is of the same order as the lower bound 
found earlier for Knill's postselection scheme. Thus 
our result proves that a high accuracy threshold can 
be compatible with a moderate overhead cost, sup- 
porting Knill's numerical findings. 

The Fibonacci scheme has some features in com- 
mon with fault-tolerant schemes used in previous 
proofs of the quantum threshold theorem, but there 
are also important differences, and correspondingly 
our new threshold proof has a rather different struc- 
ture than these previous proofs. As in previous 
schemes, logical qubits processed by the computer 
are protected from damage using a quantum code, 
and encoded gates are realized by gadgets that act 
on the code blocks and correct the errors. But stan- 
dard versions of the quantum threshold theorem are 
based on concatenated coding and recursive simu- 
lations. The code block of a concatenated code is 
constructed as a hierarchy of codes within codes — 
the code block at level j of this hierarchy is built 
from logical qubits encoded at level 1 of the hi- 
erarchy. Likewise, in a recursive simulation, fault- 
tolerant gadgets are constructed as a hierarchy of 
gadgets within gadgets — the gadgets at level j are 
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built from gadgets at level j— 1. This recursive con- 
struction streamlines the analysis; if the level- 1 sim- 
ulation of an ideal circuit is more reliable than an 
unprotected "level-0" circuit, then because of the 
self-similarity of the gadgets, the level-2 simulation 
will be still more reliable, and so on. 

In contrast, though the Fibonacci scheme uses 
concatenated coding, the construction of gadgets is 
not strictly recursive; rather, the logical controUed- 
NOT (cnot) gates and encoded measurements are 
implemented transversally at all levels of the con- 
catenated code. That is, a logical cnot gate is per- 
formed by executing many fundamental cnot gates 
in parallel in a single time step, and encoded mea- 
surements are performed by measuring many qubits 
in parallel in a single time step, followed by classi- 
cal decoding of the measurement outcomes. Errors 
are corrected by means of quantum teleportation, 
using encoded Bell pairs that are prepared recur- 
sively, and the analysis of the recursive Bell pair 
preparation procedure is the crux of our proof. For 
the scheme to succeed, it is essential that the errors 
in an encoded Bell pair are only weakly correlated; 
our central task is to formalize a notion of "weakly 
correlated" that makes the proof work, and to show 
that the encoded Bell pairs really have this property 
at each level of concatenation. 

A second distinctive feature of the Fibonacci 
scheme, as already mentioned, is that a concate- 
nated evTOT- detecting code is used to correct located 
errors. The classical decoding of a measured code 
block is performed recursively, starting at the low- 
est level; a subblock is flagged if an error is detected 
in the subblock, and at each level, if an error is 
detected in a block that has only one flagged sub- 
block, then the flagged subblock is corrected. In 
principle, flagging detected errors and construct- 
ing non-recursive gadgets are independent ideas — 
we could use flagging in a recursive scheme or use 
non-recursive gadgets without flagging. However, 
following Knill, we have found that combining flag- 
ging and non-recursive gadget construction gives an 
especially high threshold estimate at a moderate 
overhead cost. 

This paper is structured as follows. In sec- 
tion [nj we define the correlated "local stochastic" 
noise model that we consider in most of our anal- 
ysis. (Our arguments also apply to uncorrelated 
Pauli noise models, and yield a slightly better lower 
bound on the accuracy threshold in that case.) In 
section IIIII we formulate the Fibonacci scheme for 



simulating a quantum circuit, and present gadgets 
for error correction and logical gates based on a con- 



catenated 4-qubit code; then in section IV we de- 
fine our procedure for decoding the measurement of 
a code block. In sections |V] and |VI| we derive re- 
cursion relations that characterize the error correla- 
tions in recursively prepared Bell pairs and the fail- 
ure probability of gadgets for Gcss operations; this 



is the technical heart of our proof. In section VII 



we obtain a lower bound on the accuracy threshold 
for Gcss operations, and we extend it to a com- 
plete universal set of fault-tolerant quantum gates 
in section IVIIII We discuss the overhead cost of the 
Fibonacci scheme in section |IX[ Finally, section |X] 
contains our conclusions. 



II. NOISE MODEL 

We use the term location to speak of an oper- 
ation in a quantum circuit that is performed in a 
single time step; a location may be a single-qubit or 
multi-qubit gate, a qubit preparation step, a qubit 
measurement, or the identity operation in the case 
of a qubit that is idle during the time step. In a 
stochastic noise model, we assume that at each cir- 
cuit location either the ideal operation is executed 
perfectly or else a fault occurs, and we assign a 
probability to each fault path — that is, to each pos- 
sible set of faulty locations in the circuit. We speak 
of local stochastic noise with strength e if, for any 
r specified locations in the circuit, the sum of the 
probabilities of all fault paths with faults at those r 
locations is no larger than e^. For each fault path, 
the trace-preserving quantum operation applied at 
the faulty locations is arbitrary and can be cho- 
sen adversarially; therefore in this noise model the 
faults can be correlated both temporally and spa- 
tially. However, we will exclude "leakage" faults in 
which quantum information escapes from the com- 
putational space. 

In the Fibonacci scheme, errors are corrected by 
teleportation, and logical errors occur if the Bell 
measurements in the noisy circuit fail to simulate 
correctly the Bell measurements in the ideal circuit. 
We will analyze the effectiveness of the scheme by 
propagating errors forward to the measurements, in 
order to estimate the failure probability for the mea- 
surement of encoded blocks. This error propagation 
is feasible because qubits are always measured just 
a few time steps after they are initially prepared. 
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For each fault path, the operation A/" acting 
at the faulty locations can be expressed in terms 
of a set {Nk} of nontrivial Kraus operators, and 
each Kraus operator has a Pauli expansion Nj^ = 
J2i Cfc,/ Pi where Pi denotes a tensor product of 
Pauli spin operators {/, (Tx, Uy, Uz} that act at the 
faulty locations. Each Pauli operator can be prop- 
agated forward in time through the ideal circuit. 
Thus, for each fault path and for each time t, we 
obtain a trace-preserving completely positive map 
A/'(r) acting on the qubits at time r, where each 
Kraus operator in A/'(t) also has a Pauli expansion. 
For any qubit labeled q we will say that the opera- 
tion J\f causes a "type-x" error acting on q at time r 
if any Pauli operator in the expansion of A/'(t) con- 
tains either or ay acting on q; similarly we say 
that A/" causes a "type-z" error acting on q at time r 
if any Pauli operator in the expansion of A/'(r) con- 
tains either cr^ or cry acting on q. Thus, if q is mea- 
sured at time t, then J\f generates a measurement 
error with nonzero probability if the measurement 
is in the z basis and there is a type-x error, or if the 
measurement is in the x basis and there is a type-z 
error. 

III. SCHEME 

We will assume that our quantum computer is 
equipped to execute elementary operations chosen 
from the universal set 

Gcss 

G = '{CmT,Vio),V\+),M„^,M,J (1) 

u{^i+,),^iT)} ; 

here, A4a^ and denote the measurement of the 
single-qubit Pauli operators CTz and respectively 
and 7^10^ denotes the preparation of the single- 
qubit state |(/)), where |-|-) = ^(|0) -I- |1)), = 
^(|0) and \T) = ^(|0) -He-/4|1)). To 

prove our threshold theorem, first we will show that 
there is an accuracy threshold Eq^^ for operations 
in Gcss — if £ ^ ^o*'*' then encoded Gcss operations 
can be simulated to any desired accuracy. Then we 
will show that for e < Eq^^, by using the reliable 
encoded Gcss operations and the noisy elementary 
operations 7^|+i) and "Pit); we can distill accurately 
encoded copies of \+i) and \T), thus completing a 
universal set of reliable encoded operations. 

In the Fibonacci scheme, operations in G will be 
protected using the code {C^)'^^, the 4-qubit code 



C4 concatenated j times. (Knill actually proposed 
to concatenate C4 with a 6-qubit code Cg in order 
to reduce the overhead |4], but we will analyze a 
simpler scheme that uses C4 only.) The code C4 
has distance 2 and its check operators are af^ and 
(7®*. Though the code space is four dimensional, 
we will use only one of the two encoded qubits to 
protect the quantum information processed by the 
computer. The encoded Pauli operators acting on 
this "logical" qubit are 

(7^ = <S) I <E) <Jz <^ I , cr^ = CTx <8) «) / «) / , (2) 

while the encoded Pauli operators acting on the ir- 
relevant "gauge" qubit are 

^ I (g) I (g) (g) , ^ a^g) I g) a^g) I . (3) 

We do not care about the state of the gauge qubit, 
and therefore a error acting on the third qubit 
in the code block is equivalent to a error acting 
on the fourth qubit — the errors differ by the gauge- 
qubit operator , which commutes with the logical 
Pauli operators. Likewise, errors on the first and 
second qubits are equivalent, as are CTx errors on the 
first and third qubits or errors on the second and 
fourth qubits. 

We will derive our lower bound on Eq^^ by show- 
ing that, for E < Eq^^, "gadgets" realizing encoded 
Gcss operations protected by {04)''^ become highly 
reliable as j increases. How are these gadgets con- 
structed? First, consider the Gcss gadgets pro- 
tected by C4 (the case j = 1). The CNOT gad- 
get, shown in Fig. [T] consists of a transversal logi- 
cal CNOT gate, together with error recovery steps on 
each block that precede and follow the transversal 
gate. The other Gcss gadgets are smaller and more 
reliable than the CNOT gadget, so to obtain a lower 
bound on the Gcss threshold it suffices to study the 
CNOT gadget. 

Inside all gadgets, error recovery is achieved by 
logical teleportation using Bell pairs encoded in C4. 
The encoded Bell pairs (1-BPs) are prepared by us- 
ing unencoded Bell pairs (0-BPs) and CNOT gates 
as in Fig. [2] The preparation circuit must be de- 
signed carefully to control correlated errors. We do 
not need to worry about correlated errors in the 0- 
BPs — any two-qubit error acting on the Bell state 
= ^(|0) g) |0) + |1) g) |1)) is equivalent to 
a one-qubit error, because |<i>o) is invariant under 
(Tx <8) CTx and g) cFz. On the other hand, error cor- 
relations between the two blocks of the 1-BP might 
cause trouble, and can arise from a single fault in 
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FIG. 1: The gadget for a CNOT gate protected by C4. 
A transversal CNOT gate, which implements the logical 
CNOT gate acting on two blocks, is preceded and fol- 
lowed by logical teleportations which extract the code's 
error syndrome. Arrows denote CNOT gates, with the 
arrow tip pointing to the target qubit. Green and blue 
triangles pointing to the left denote Ma^ and Ma^ re- 
spectively, and Bell pairs encoded in C4 (1-BPs) are 
prepared as in Fig. [2] 



(a) (c) 




FIG. 2: (a) Preparation of an unencoded Bell pair 
(0-BP) where green and blue triangles pointing to the 
right denote 7^1+) and Vio) respectively, (b) A Bell pair 
encoded in C4 (1-BP) is constructed by preparing one 
block in the logical |+) state, a second block in the log- 
ical |0) state, and applying transversal CNOT gates, (c) 
The two blocks of a 1-BP are teleported, using two other 
1-BPs, in order to limit correlations between errors in 
different output blocks. Depending on the measurement 
outcomes, logical Pauli operators (not shown) acting on 
the two output blocks may be needed to complete the 
teleportations. 



the transversal CNOT gate shown in Fig. ^h). A 
simple way to suppress correlated errors is to follow 
the preparation of the 1-BP with the teleportation 
of both blocks, using two other 1-BPs as shown in 
Fig. |2jc). Using this circuit, an error occurs in an 
output block only if there is a fault in the teleporta- 
tion of the block; therefore, errors in different blocks 
must arise from distinct faults. 

One way to construct the gadget for the CNOT 
gate encoded in (04)'^'^ would be to replace every 
elementary CNOT gate in Fig. [T] by the CNOT gad- 
get encoded in C4. And by repeating this replace- 
ment recursively, we could obtain the "level-j" gad- 
get for the CNOT gate encoded in (Ci)'^^ for any 
j > 1 . However, in the Fibonacci scheme we do 
not follow this recursive procedure to construct the 
higher-level gadgets. Instead, for each j the logical 
CNOT gate inside the level-j CNOT gadget is per- 
formed transversally in a single time step just as 
in Fig. [1] and the measurements of encoded blocks 
are also transversal. We construct the higher-level 
gadgets using this non-recursive method because we 
have found that it yields a significantly better lower 
bound on the accuracy threshold than a strictly re- 
cursive procedure. On the other hand, the level-j 
Bell pair (j-BP) inside the level-j CNOT gadget is 
constructed recursively. That is, just as the 1-BP 



preparation circuit in Fig. |2jc), constructed from 
transversal level- 1 CNOT gates and measurements, 
operates on twelve input 0-BPs, so the j-BP prepa- 
ration circuit, constructed from level-j transversal 
CNOT gates and measurements, acts on twelve input 
(j-l)-BPs. 

But this circuit for preparing a j-BP still has a 
flaw that must be addressed — for j large, each out- 
put qubit of the j-BP goes unmeasured for many 
time steps, gradually accumulating errors. Let us 
say that the final step in the j-BP preparation cir- 
cuit, the level-j transversal CNOT gate acting on the 
output blocks, occurs in time step j. This transver- 
sal CNOT follows (j— 1)-BP preparations that are 
completed in time step j— 1. Thus, there are level- 
(j— 1) transversal CNOT gates in time step j— 1, 
which are preceded by (j— 2)-BP preparations that 
are completed in time step j— 2, and so on. We 
see that each of the output qubits of the j-BP is 
acted on by CNOT gates in consecutive time steps 
1 through j. But during these j steps nothing is 
being done to correct the errors in these qubits. 

We can correct this flaw by adding one more in- 
gredient to the scheme; for j > 1 we replace the 
circuit in Fig. ^c), by the circuit in Fig. |3] In this 
modified circuit, after a j-BP is prepared, we tele- 
port every output (€4)^^^^^^ subblock by using ad- 
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(a) 




(b) 

f-<0'x 



( ' I < ^ < ' I < ^ 

FIG. 3: (a) The complete preparation circuit for a j- 
BP where j > 1. It is identical to the circuit shown in 
Fig. [2|c) , except that a final teleportation of each level- 
(j — 1) subblock has been added, (b) The teleportation 
circuit. 

ditional (j'— l)-BPs. In the modified j-BP prepara- 
tion circuit, then, the last step is a (j — 1)-BP prepa- 
ration acting on the subblocks. In turn, the last step 
in the (j— 1)-BP preparation is a (j'— 2)-BP prepa- 
ration, the last step in the (j— 2)-BP preparation is 
a (j— 3)-BP preparation, and so on. Thus, the out- 
put qubits from the circuit actually emerge directly 
from 1-BPs, and there is no accumulation of error 
to worry abovit. 

To determine the effectiveness of this scheme, 
where errors are corrected by logical teleportation, 
we need to estimate the probability of failure when a 
(04)'^^ code block is measured. Measurements are 
performed transversally — to measure the encoded 
(Tx, we measure all qubits in the block simultane- 
ously in the x basis, and to measure the encoded az, 
we measure all qubits in the block simultaneously in 
the z basis. Then these measurement outcomes are 
decoded using a classical recursive algorithm that 
is assumed to be noiseless. First, the C4 subblocks 
are decoded, then the ((74)'*^ subblocks, etc., up to 
the final (04)'^^ block. At each level i > 1, the de- 
coding of a (C4)'' block makes use of the error 
syndrome computed in the previous step during the 
decoding of its four (C4)''' subblocks. Specifically, 
whenever we detect an error in a (C4)'** subblock 
for 1 < i < j, we flag this subblock to indicate 
that the decoding of the subblock has an enhanced 
probability of failure. Then, if a {C4T^'+^^ block 
has a nontrivial error syndrome and a single flagged 
subblock, we decode the ((74)'^^*''"^' block under the 
assumption that the flagged subblock was decoded 
incorrectly. 

At the top level, an error might be detected in 



the decoding of the final {04)^^ block that cannot 
be corrected (either because no ((74)'^ '^■'"^^ subblock 
is flagged, or because more than one subblock is 
flagged). If such an uncorrectable error is found 
at the top level in the recursive preparation of an 
encoded Bell pair, then the preparation is aborted. 
On the other hand, if such an uncorrectable error 
is detected at a measurement's top level in the tele- 
portation step inside a gadget, then the code has 
failed to protect the measurement effectively. We 
will prove that, for sufficiently weak noise, the prob- 
ability of detecting an error in the final decoding 
step of a {04)^^ block decreases rapidly with in- 
creasing j. Thus the overhead cost due to aborting 
and restarting the preparation of encoded Bell pairs 
is moderate; the preparation of a j-BPs is rarely 
aborted once j is large. Furthermore, the probabil- 
ity of a logical error inside a level-j gadget becomes 
arbitrarily small for j sufficiently large. 



IV. DECODING C4 

Now we will specify in more detail the (noise- 
less) classical algorithm for decoding measurements 
of code blocks, and we will discuss the effectiveness 
of this algorithm. Under appropriate assumptions 
about the noise in the measurements, we would like 
to estimate how the probability of error and the 
probability of flagging propagates from level to level 
as the block is recursively decoded. 

At each level of the recursive decoding, we are to 
interpret a 4-bit string corresponding to the mea- 
sured eigenvalues of the encoded cr^ or the encoded 
CTz in the four {C4T' subblocks of a (04)'^^'+^'^ 
block, where some of the bits might be flagged. The 
decoder knows which bits are flagged, but of course 
it does not know which bits have errors. We may 
consider a joint distribution that governs the proba- 
bility of error and the probability of flagging for the 
four bits. For each measurement in the Fibonacci 
simulation, and for each level of the concatenated 
code, this distribution is completely determined in 
principle by the decoding procedure at lower levels 
and by the noise model. That is, if we know the 
probability of each fault path and the noise opera- 
tion associated with each fault path, we can propa- 
gate the errors forward (as described in section [ll| 
to determine an error model for the measured block. 
Then using this error model and the decoding pro- 
cedure, we can assign a probabiHty (or at least an 
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upper bound on the probability) for each nontriv- 
ial pattern of flagging and errors at each decoding 
level. 

To prove our threshold theorem, we will need to 
show that the decoding errors at each concatena- 
tion level are only weakly correlated. A suitable 
notion of weakly correlated, which we call "quasi- 
independence," is defined as follows: 

Definition 1 (Quasi- independent errors). Let 

P{u, v) be a probability distribution for a set T of 
n bits, where the n-bit binary vector u specifies the 
positions of bits with errors, and the n-bit binary 
vector V specifies the positions of flagged bits. Let 
and K-s denote disjoint subsets of X contain- 
ing r bits and s bits respectively, and let Cf de- 
note a subset of ICs containing t bits. We say that 
the distribution P{u, v) is quasi-independent with 
strength {/, <5/,5-^/} if, for any choice of Jr, ICs, 
and Ct, the probability that all bits in Jr o,fe un- 
flagged with errors, all bits in ICg are flagged, and 
all bits in Ct are flagged with errors is no larger 
than {S^fY{SfY f'^~* . We say that S^f is the error 
strength for unflagged bits, Sf is the error strength 
for flagged bits, and f is the flagging strength. 

When applied to the decoding of cr^, the errors 
of interest are errors; hence quasi-independence 
constrains how CTx errors are correlated with one 
another. Likewise, when applied to the decoding of 

, quasi-independence constrains how the er- 
rors are correlated with one another. But we will 
not need to know much about how CTx errors are cor- 
related with (Jz errors to analyze the failure proba- 
bility for measurements of encoded blocks. 

Now we would like to show that when we re- 
cursively decode a {04^^ block, if the errors are 
quasi-independent at level i they will also be quasi- 
independent at level furthermore, we wish to 
estimate the error strengths at level i-\-l given an 
estimate of the error strengths at level i. First, let 
us formulate precisely our algorithm for flagging a 
C4 block: 

Algorithm 1. (a) // no bit in the block is flagged, 
then we flag the block whenever the syndrome is 
non-trivial, (b) Lf exactly one bit in the block is 
flagged, then we never flag the block, (c) // two or 
more bits in the block are flagged, then we flag the 
block if errors on a pair of flagged bits can cause a 
logical error. 

In case (a), we flag the block because we have de- 
tected an error that we do not know how to correct. 



In case (6), rather than flagging the block, we per- 
form error correction (in the event of a nontrivial 
syndrome) under the assumption that the flagged 
bit has an error. In case (c), we do not flag the 
block if errors at the flagged bits would affect only 
the gauge qubit, not the logical qubit. 

Given this flagging algorithm and assuming 
quasi-independent errors on the bits, we can see 
that the C4 blocks also have quasi-independent er- 
rors. We may define a function, which we call 
DECODE, that maps upper bounds {f'-'"^\df''\d^^f} 
on the error strengths for the bits to upper bounds 
|y(out) jjout)^ ^{™t)| Qj-^ ^Yie error strengths for the 
blocks. This function is specified in Table |T] In the 
rest of this section, we explain how the function 
DECODE is derived. 

Consider first the upper bound in Eq. ^ on the 
probabihty of flagging a C4 block. According to our 
algorithm, a block is flagged in the two cases (a) 
and (c). In case (a), an error on at least one bit in 
the block is necessary for the syndrome to be non- 
trivial. Since all bits are unflagged, the probability 
of flagging the block is at most AS^^f ■ (c), 
only 4 out of the (2) = 6 possible ways to choose 
two flagged bits in the block can result in a logical 
error. For example, if is measured, then we do 
not flag the block if only the first and third bits are 
flagged, or if only the second and fourth bits are 
flagged, because the weight-2 errors I ^ I 
and / (g) iTx / (E" CTx affect only the gauge qubit, not 
the logical qubit. Thus, the probability of flagging 
the block is at most 4(/('"))2. 

Consider next the upper bound in Eq. ([5| on the 
joint probability that the C4 block is flagged and 
that decoding results in a logical error. Again we 
distinguish the two cases (a) and (c) of our flagging 
algorithm. In case (a), there is no flagged bit to help 
us interpret a non-trivial syndrome; by convention, 
then, we respond to a nontrivial syndrome by flip- 
ping the flrst bit in the block. Suppose that is 
measured. Then a logical error can arise from a CTx 
error on the second or the fourth bit but not from a 
CTx error on the third bit, because CTx(8)/(8)CTx(8)/ — ct^ 
commutes with a^. A similar observation applies 
to a measurement of ct^. Thus, the probability of a 
logical error in case (a) is at most 26'Y^\ 

We divide case (c) into two subcases (c') and 
(c") depending on whether there is an erroneous un- 
flagged bit in the block or not . The probability of a 
logical error in case (c') is at most 4(/(™')^ •2(5^1^'' — 
at least two bits in the block must be flagged, which 
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Function DECODE : {f"'\sf''\5^f} ^ {/(°"*) , 4°"''' ^^7*^} 

If the bits in a set of C4 blocks have quasi-independent errors, then the blocks also have quasi-independent 
errors. The function DECODE maps upper bounds on the error strengths 4'"' ' ^-/'^ ^^^^ *° 

upper 

bounds on the error strengths (5j.°"'' , (5^} for the blocks. 

With our algorithm for flagging a C4 block, the probability that a block is flagged is no larger than 

the joint probability that a block is flagged and there is a decoding error is no larger than 

and the joint probability that the block is not flagged and there is a decoding error is no larger than 

= 4 (<5l7') ' + 8/('">5i,7' . (6) 



TABLE I: Upper bounds on error probabilities for the decoding of a C4 block. 



can be chosen in 4 ways, and with a flagged pair 
of bits fixed, there are at most two unflagged bits 
where an error may occur. 

Alternatively, in case (c") there are no errors on 
unflagged bits. If exactly two bits are flagged, then 
an error on one of the two flagged bits causes a log- 
ical error, while an error on the other flagged bit 
does not. (In particular, if the syndrome is non- 
trivial, then we recover by flipping one of the two 
flagged bits, which is chosen by convention; a logi- 
cal error occurs only if the other flagged bit has an 
error.) Since there are four ways to choose a pair of 
flagged bits, the probability of a logical error is at 
most 4/'^™^(5j-™^ Otherwise, at least three bits are 
flagged, and for a logical error to occur, at least one 
of the flagged bits has an error. There are four ways 
to choose a set of three bits, and for each choice of 
three bits, there are three ways to choose which bit 
has the error. Therefore, the probability of a logical 
error is at most 4(/('"))2 • S^'"^- 

Finally, consider the upper bound in Eq. ([6]) on 
the joint probability that the C4 block is not flagged 
and that decoding results in a logical error. If no bit 
in the block is flagged, then the syndrome must be 
trivial; otherwise the block would have been flagged. 
Therefore an even number of bits have errors, and 
since a weight-4 error acts trivially on the block, we 
may assume there are two bits with errors. Thus, 
the probability of a logical error is at most 4(,5l;"V> 
as there are four pairs of bits where errors can cause 
a logical error. 

Alternatively, at least one bit in the block is 
flagged. First, suppose there is exactly one flagged 



bit. Then if the flagged bit has an error and there 
are no other errors in the block, the flagged error 
will be corrected successfully. We conclude there- 
fore that, if there is a logical error, there must be 
an unflagged error in the block. 

The last possibility is that there are two flagged 
bits in the block (if there were more flagged bits 
we would have flagged the block), such that errors 
on the pair of flagged bits do not cause a logical 
error. In this case, too, a logical error occurs only if 
there is an unflagged error in the block. For suppose 
there is no unflagged error. Then if the syndrome 
is trivial, there must be either zero of two flagged 
errors, and either way there is no logical error. If 
the syndrome is nontrivial then one flagged bit has 
an error and the other does not. To decode, we flip 
one of the flagged bits (chosen by convention) in 
response to the nontrivial syndrome. The bit with 
the error might be the flipped bit or it might be 
the other flagged bit; either way there is no logical 
error. 

In fact, in all cases where there is at least one 
flagged bit and there is a logical error, there must be 
a pair of bits such that one bit in the pair is flagged, 
the other bit has an unflagged error, and errors on 
the pair of bits cause a logical error. Therefore, the 
probability of a logical error is at most 8/^™-'(5^;'j^ — 
there are four ways to choose a pair of bits such 
that errors on that pair cause a logical error, and 
either of the two bits in the pair could be the flagged 
bit. This completes our explanation of the function 
DECODE. 

Now that the function DECODE has been specified. 



8 



we can explain how the Fibonacci scheme gets its 
name. Schematically, Eqs. Q and (|6| say that the 
probability of flagging /^^^ and the joint probability 
S^j of no flag and a logical error scale with the level 
J of concatenation according to 



combining these relations we find that 



(7) 



(8) 



Therefore, if S^^j scales with the fundamental noise 
strength e according to 



we find 



FU+l) = F{j) + Fij-1) 



(9) 



(10) 



the recursion relation for a Fibonacci sequence. We 
can solve this recursion relation using the initial 
data F{1) = 1, F{2) = 2. Likewise, Eq. ^ im- 
plies that the joint probability 5^^^ of fiagging and 
a logical error scales as 



(11) 



When e is small, then, the probability of a decod- 
ing failure at level j is "double-exponentially" sup- 
pressed by a power F(j) of e that grows with j like 
a Fibonacci number: 



(12) 



where = | (l -I- \/5) ~ 1.618 is the golden ratio. 



V. LEVEL REDUCTION FOR BELL PAIR 
PREPARATION 

Fault-tolerant quantum computation based on a 
recursive simulation can be analyzed using a pro- 
cedure called "level reduction" [31 El [7] • In this 
procedure, one identifies an effective noise model 
that acts on quantum information encoded at level 
j of a concatenated quantum code, and the effec- 
tive noise strength e'^^ at level j is expressed in 
terms of the effective noise strength e^-'"^) at level 
j — 1. The threshold theorem is proved by showing 



that £*^-'^ falls steeply as j increases, provided that 
the fundamental "level-0" noise strength e is small 
enough. 

Level reduction as practiced in [31 [7] does not 
apply directly to the Fibonacci scheme, which is not 
strictly recursive, but we can use a modified version 
of the level reduction concept. The central task of 
our proof is to characterize the errors in recursively 
prepared j-BPs, and we will show that these errors 
admit a hierarchical decomposition. That is, we will 
identify an "error strength" for the errors acting on 
the elementary qubits in the output (6*4)'*^ blocks 
of the noisy preparation circuit of a j-BP, and also 
for the logical errors acting on the (£'4)'^* subblocks 
for 1 < i < j- By an inductive argument, we will 
obtain an upper bound on the error strength at each 
level. 

The task of bounding the error strength at each 
level is fairly manageable because in the preparation 
of a j-BP the output level-j blocks are teleported, 
as are the level- (j—1) subblocks for j > 2. Because 
of the subblock teleportation, the noise in a j-BP at 
levels i = 0, 1, . . . , j— 2 is the same as the noise in a 
(j— 1)-BP at levels i — 0,1, . . . ,j~2 (up to a small 
correction due to postselection) . To characterize 
the noise in a j-BP at level j—1 we need to esti- 
mate the probability of a level- (j—1) logical error in 
the subblock teleportation, and to characterize the 
noise at level j we need to estimate the probability 
of a level-j logical error in the block teleportation. 

Such logical errors occur when the recursively de- 
coded measurement of a level- (j—1) subblock or a 
level-j block in the noisy circuit disagrees with the 
corresponding measurement in the ideal circuit. We 
can estimate the probability of a measurement er- 
ror for a subblock or block by repeatedly using the 
function DECODE constructed in section |IV[ Starting 
at level 0, the level-0 errors in the (j— l)-BPs and 
the level-0 errors due to faults in the CNOT gates 
are propagated forward to the qubit measurements, 
and the probability of a level- 1 decoding error is es- 
timated using DECODE. Next the level- 1 errors in the 
(j— l)-BPs are propagated forward and combined 
with the level- 1 decoding errors; then the proba- 
bility of a level-2 decoding error is estimated using 
DECODE. After j—1 steps, we obtain an estimate of 
the probability of a logical error in the level-(j— 1) 
subblock teleportation. Similarly, by propagating 
errors at each level through the j-BP preparation 
circuit, and using DECODE repeatedly, we can esti- 
mate the probability of a logical error in the level-j 



block teleportation. We also need to take into ac- 
count that a j-BP is rejected if an error is detected 
at the top decoding level, in either the subblock 
teleportation or the block teleportation. The rest 
of this section explains these estimates in detail. 



A. Noise in 0-BPs 

To begin, consider a noisy 0-BP which is pre- 
pared by the circuit in Fig. [2]ja). To characterize 
the errors in the 0-BP, it is useful to consider a fic- 
titious effective noisy circuit, denoted ^Po-bp and 
shown in Fig. |4] The effective circuit *Po-bp con- 
sists of an ideal 0-BP preparation followed by noisy 
"storage locations" acting on the two qubits, where 
the faults at these noisy locations are chosen so that 
the output of the effective circuit matches the out- 
put of the actual noisy circuit. 

Now recall that we say a fault is of "type x" if one 
of its Kraus operators does not commute with ctz 
and of "type z" if one of its Kraus operators does not 
commute with a^- The code C4 is a CSS code that 
detects type-x errors and type-z errors separately, 
so to analyze the performance of the code we do not 
need to know how type-x errors are correlated with 
type-z errors. Furthermore, since the Bell state |$o) 
is left invariant by CTx ® Ux and CTz (8) (Jz , any weight- 
two error in the effective circuit is equivalent to a 
weight-one error. 

Suppose that the noise in the actual circuit is 
local stochastic noise with strength e, and consider 
the type-x errors. With suitable conventions, the 
noise in the effective circuit (or equivalently in the 
noisy Bell pair) is quasi-independent with strength 



(13) 



here, anticipating our discussion of the errors in 
higher-level BPs, j = indicates that we are talk- 
ing about a level-0 Bell pair, and i = indicates 
that we are considering level-0 (i.e., qubit) errors. 
Naively, one might have expected the right-hand 



side of Eq. (13 1 to be 2e rather than e, because an 



error could arise in either a preparation step or the 
CNOT gate. However, a ctx error acting right after 
the preparation 7^1+) of the first qubit acts trivially, 
while a Cx error acting on the target qubit after the 
CNOT gate is equivalent to a Cx error acting on the 
control qubit. A similar remark applies to errors, 
but with the target and control qubits interchanged; 
thus the type-z noise is also quasi-independent, with 



% = c 



FIG. 4: The noisy preparation of a 0-BP is equivalent to 
an ideal 0-BP followed by noisy storage locations acting 
on the two qubits (denoted by black dots). Noise is 
quasi-independent and the strength for errors of type m 
is ea„,(0,0). 



strength 



;..(i=0,J-0) <e. (14) 



B. Noise in 1-BPs 

Next, consider a noisy 1-BP which is prepared 
by the circuit in Fig. [2|c). As before, we charac- 
terize the errors in the 1-BP using a fictitious ef- 
fective noisy circuit, denoted *Pi_bp and shown in 
Fig. [5]^ a), that produces the same output as the ac- 
tual noisy circuit; here, 'D~^ denotes an ideal C4 
encoder, an isometry mapping the state of a single 
qubit to the corresponding state of the logical qubit 
in a C4 block. There are two kinds of noisy storage 
locations in the effective circuit, indicated by dots — 
"level- 1 noise locations" that immediately precede 
an ideal encoder and "level-0 noise locations" that 
immediately follow an ideal encoder. 

We consider separately the noise of type x and 
type z, and we want to formalize the idea that the 
noise of each type is quasi-independent at each level. 
We will do that by formulating and demonstrating 
properties of a noise model that describes the faults 
in the effective circuit, first for the preparation of 
a 1-BP, then for the preparation of a j-BP with 
j > I. Thus, in our inductive arguments, we will 
be able to justify replacing the actual noisy prepa- 
ration circuit of a j-BP by an effective preparation 
circuit governed by a suitable noise model. 

We will show that the noise in the effective prepa- 
ration circuit is quasi-independent according to the 
following definition: 

Definition 2 (Quasi-independent noise). Let T = 

{ii,i2, ■ ■ ■ ,in} be a set of n locations in a noisy 
quantum circuit. We say that the noise in X is type- 
X quasi-independent with strength {ei, £2, ■ ■ • , £«} 
if for any subset J — {^ji,^j2' • ■ -^irl 0/ I the 
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FIG. 5: (a) The effective circuit ^Pi_bp that produces 
the same output as the 1-BP preparation circuit in 
Fig. ^c); here, O"^ denotes an ideal encoder and the 
black dots are noisy storage locations, (b) The circuit 
in (a) can be represented as a directed depth-2 tree, 
with noisy locations at the vertices. The noise is quasi- 
independent for any legitimate set of vertices (a set is 
"legitimate" if it contains no descendant of a member 
of the set). 



probability that there are type-x faults at all loca- 



tions in J is no larger than e^v, ■ ■ ■ £j 



Type- 



z quasi-independence is defined similarly. We say 
that the noise in X is fully quasi-independent (or, 
more briefly, quasi-independent) if it is both type-:>c 
and type-z quasi-independent. 

The definition of quasi-independent noise is simi- 
lar to the definition of local stochastic noise, but 
with three differences: it can be applied to a subset 
of all the locations in a circuit, the noise strength 
can depend on the location, and it constrains the 
correlations only among faults of the same type (it 
does not limit the correlations of type-x faults with 
type-z faults). 

We can represent *Pi_bp as a directed depth-2 
tree as in Fig. [sjb), where the level-1 noise loca- 
tions are vertices at depth 1 below the root, and the 
level-0 noise locations are vertices at depth 2. Noise 
at the depth- 1 locations is quasi-independent if we 
adopt the conventions explained in section [VA[ and 
noise at the depth-2 locations is quasi-independent 
because the CNOT gates in the 1-BP preparation cir- 
cuit are applied transversally. Furthermore, noise at 
a depth- 1 location preceding one encoder is quasi- 
independent of noise at a depth-2 location following 
the other encoder — the 1-BP preparation circuit has 
been designed so that no fault can cause both an 
error in one output block and failure of the logical 
teleportation of the other output block. 

We may say that vertex B on a directed tree is 
a "descendant" of vertex A if there is a directed 
path on the tree beginning at A and ending at B, 



and that a set of vertices is "legitimate" if no vertex 
in the set is a descendant of another vertex in the 
set. Then our observations are summarized by the 
following lemma: 

Lemma 1. Consider a legitimate subset T of the 
noisy locations in ^i_bp- The noise in X is type-ia 
quasi-independent for m = x, z. Conditioned on ac- 
cepting the 1-BP, the noise strength is ea-,^{0,l\l) 
at depth-2 (i.e., level-0) locations and £o-,n(l,l|l) 
at depth-1 (i.e., level-1) locations, as specified in 



Eqs. and 1^ below. 

To estimate the conditional error probabilities 
ecr„(0, 1|1) and €^^{1, 1|1), we will first estimate the 
joint probabilities for accepting the 1-BP together 
with errors at level and level 1 respectively, then 
divide by an estimate of the acceptance probability. 

Let e(T„(0, 1) denote the error strength disregard- 
ing whether the 1-BP is accepted, which is of course 
an upper bound on the joint probability for accep- 
tance and a level-0 error. We can obtain an upper 
bound on ^^^(0, 1) by enumerating the locations in 
the circuit shown in Fig. |2|c) where type-m faults 
can cause type-m errors on qubits in the output 
blocks (we need only consider type-m faults since 
type-m errors preceding a CNOT gate are equivalent 
to type-m errors following the gate). Following the 
error propagation through the preparation circuit, 
we find 



,(0,1) < £ + Cl,n£,.„(0,0) , 



(15) 



where cix = 1 and ciz = 2. The first term bounds 
the probability of a fault in a CNOT gate in the 
last step in the preparation circuit, and the second 
term bounds the probability that an error in a 0-BP 
propagates to an output qubit. Since Cx errors do 
not propagate from the target to the control qubit 
of a CNOT gate while errors do, a error from 
just one 0-BP and CTz errors from two 0-BPs may 
propagate to a given output qubit. 

Level-1 noise arises from errors in the logical tele- 
portation of encoded blocks. Therefore, we ob- 
tain an upper bound on £cr„, (1,1) by estimating 
the probability of an error in the decoded measure- 
ment of a C4 block. As described in section [TV] we 
propagate type-m errors due to faults in the circuit 
forward to the measurements, obtaining a quasi- 
independent description of the errors in the mea- 
sured block; thus the probability of a logical error 
can be estimated using the function DECODE. 

Let 6o-„(0,l) denote the noise strength for the 
measured bits in the block. Analyzing the error 
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propagation in the circuit shown in Fig. |2jc), we 
find 

6,.„(0,1) <4£ + c2„,£,„(0,0) , (16) 

where C2x — 4 and = 3. The first term bounds 
the probability of a fault in one of the three CNOT 
gates that act on each measured qubit or a fault 
in the measurement itself. The second term bounds 
the probability of an error in the qubit measurement 
caused by an error in a 0-BP — errors from at 
most four 0-BPs and errors from at most three 
0-BPs can propagate to each measured qubit. 

The function DECODE provides an upper bound 



on the probability that the measurement of a level- 1 
block is flagged, which we denote by (i=l, j=l). 
The superscript b indicates that this is the flagging 
probability for block teleportation; later will use 
to denote the flagging probability for subblock tele- 
portation (which has a different circuit). We let 
ba-^{i—l,j—l/\f) denote the joint probability that 
the block is flagged and the decoded measurement 
has a logical error, while (i=l, j=^/\^f) denotes 
the joint probability that the block is not flagged 
and the decoded measurement has a logical error. 
Upper bounds on these quantities are computed us- 
ing the function DECODE, according to 



DECODE : {0, 0, 6,^(0, 1)} ^ {f' (1, 1), (1, lA/), ^.„(1, lA-/)} 



(17) 



The first two arguments of DECODE vanish because 
no level-0 bits are flagged. 

If a flag is raised in the decoding of any block in 
the preparation circuit, we abort and the prepara- 
tion of the 1-BP is restarted. Thus 

£,.„(1,1) = 6,„(1,1A-/) (18) 

is certainly an upper bound on the joint probability 
of acceptance together with a level-1 error, because 
the 1-BP will be accepted only if the level-1 mea- 
surement is unflagged. For a flag to be raised inside 
the preparation circuit at least one fault must occur, 
so the probability of accepting a 1-BP is 

p{j=l) > {I - e)'' , (19) 

where TV = 72 is the number of elementary opera- 
tions in the preparation circuit — there are 12 0-BPs, 
each of which is constructed by using 3 elementary 
operations, 5x4 CNOT gates, and 4x4 measure- 
ments. Therefore, we obtain an upper bound on 
the noise strength for the locations in CPi_BP, con- 
ditioned on the acceptance of the 1-BP: 

£-..,(0,1) 



.(0,1|1) < 



(20) 



for the depth-2 noisy locations, with £cr„(0, 1) as in 



Eq. (15), and 



£-.„(l,l|l) < 



.(1,1) 

(l-£)^ 

for the depth-1 noisy locations, with 



(21) 

,(1, 1) as in 




Eq. (18) 



FIG. 6: The effective circuit ?P_,_bp that produces 
the same output as the j'-BP preparation circuit in 
Fig. [3] The circuit is a depth- (j -1-1) directed tree, with 
noisy locations at the vertices, and the noise is quasi- 
independent for any legitimate set ol vertices. Condi- 
tioned on accepting the j-BP, the noise strength for er- 
rors of type m is ecr^{i,j\j) at depth-(j4-l— i) in the 
tree. 



C. Noise in j-BPs 

The preparation circuit of a j'-BP with j > 2, 
shown in Fig. [3] includes subblock teleportations as 
well as block teleportations; otherwise it is similar 
to the preparation circuit of a 1-BP, but where the 
input Bell pairs are (j— l)-BPs instead of 0-BPs. 
As for the 1-BP, we obtain a hierarchical descrip- 
tion of the noise in the j-BP preparation circuit by 
constructing the equivalent circuit *Pj_BP, shown 
schematically in Fig. [6j This equivalent circuit has 
the structure of a depth-(j-l-l) directed tree, with 
level-j noise at depth 1, level-(j— 1) noise at depth 
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FIG. 7: (a) The j-BP preparation circuit, where each 
input state is a (j — 1)-BP, each CNOT gate denotes 
a transversal CNOT acting on two ((74)" blocks, 
and each measurement denotes a transversal measure- 
ment of a (04)^ block. The magnified drawing 
shows the elTective circuit ?P(j_i)_Bp, a depth-j directed 
tree, that produces the same output as the (ji — 1)-BP 
preparation circuit; this (j — 1)-BP is used to teleport 
a {C4)''-'~^ subblock. (b) Construction of the effective 
circuit *Pj_BP that produces the same output as the j- 
BP preparation circuit. Noisy locations at vertices of 
depth 3 or more are inherited from the (j — l)-BPs used 
in the subblock teleportations. The noise at depth 2 
comes from two contributions which are combined to- 
gether: the noise in the input (j — 1)-BP (shown inside 
the dashed curve) and the noise due to logical errors 
in the subblock teleportation (shown inside the solid 
curve). The noise at depth 1 comes from logical errors 
in the block teleportation (also shown inside the solid 
curve). 



2, etc., down to level-0 noise at depth j+l. Since 
the actual circuit in Fig. [3] builds the j-BP start- 
ing with input (j— l)-BPs, we can characterize the 
noise in *Pj^BP recursively. 

Our goal is to prove the following lemma: 



noisy locations in *Pj_BP- The noise inX is type-m 
quasi-independent for m = x, z. Conditioned on ac- 
cepting the j-BP, the noise strength is Eo-n, (i,i|j) 
at depth (i.e., level i) locations for i — 

0,1,2,..., j, as specified below. 

We will estimate the conditional error probabilities 
using the identity 



(22) 



here, Str^ii, is the probability of a level-i er- 

ror in the output j-BP conditioned on only the ac- 
ceptance of the input (j— l)-BPs, and p(j|j— 1) is 
the probability of accepting the j-BP conditioned 
on the acceptance of the input (j— l)-BPs. 

To construct the effective circuit *Pj_BP for the 
preparation of the j-BP, we first replace each in- 
put (j— 1)-BP in the j-BP preparation circuit by its 
effective circuit ^P(j-i)_bpi as shown in Fig. |7|a). 
Because all of the output subblocks of the j-BP 
are teleported using (j— l)-BPs, the noise at level 
i = 0,l,2,...j— 2 in the j-BP is inherited di- 
rectly from the noise in the (j— l)-BPs; hence for 
< i < j^2 we have 



(23) 



However, the depth 2 (i.e., level-(j— 1)) noise in 
*Pj_BP arises from two sources that must be com- 
bined together as shown in Fig. [Tj^b): errors occur 
both in the input (j— l)-BPs and in the teleporta- 
tion of the (6*4)^ (^-1) subblocks. Finally, the depth 
1 {i.e., level- j) noise in *Pj-BP arises from errors in 
the teleportation of the {€4)^^ blocks. 

First, we consider the block teleportation. The 
level-0 errors in the (j— l)-BPs and the level-0 er- 
rors due to faults in the CNOT gates can be prop- 
agated forward to the qubit measurements in the 
block teleportation. We find that errors of type m 
in the measurement outcomes (which are unflagged) 
have strength 

V„(0,jA-/|j-l) < 4e + c2,„e.„(0,j-l|j-l) , 

(24) 

where C2x — 4 and C2z = 3 as in Eq. (16 1. Since 
these errors are quasi-independent, we use the func- 
tion DECODE to find the error strength for the de- 



Lemma 2. Consider a legitimate subset X of the coded C4 block as in Eq. (17l: 



13 



DECODE : {0, 0, (0, jA-/|j-l)} ^ {,^^(1, 6,.„(l,iA/|j-l), ^Jl, jA-/|j-l)} , (25) 



where all the probabilities are conditioned on 
the acceptance of the input (j/— l)-BPs; here, 
/^^(l, — 1) is an upper bound on the probability 
of flagging a C4 subblock, 6ct,„(1, jA/|j— 1) is the 
joint probability that the subblock is flagged and 
there is a decoding error, and 6ct,-„(1, jA^/|j — 1) is 
the joint probability that the subblock is not flagged 
and there is a decoding error. (We use to denote 
the flagging probability for a block teleportation; 
later we will use to denote the flagging probabil- 
ity for a subblock teleportation.) 

But the measurement result for the C4 block 
could be erroneous for either one of two reasons. 
The level-0 errors, propagated forward to the qubit 
measurements, could cause an error in the decoding 
of the C4 subblock, and we have estimated the prob- 
ability of such a decoding failure using the function 
DECODE. Alternatively, a level- 1 error in an input 
(j— 1)-BP could propagate forward to a measured 
C4 subblock, causing a logical error. We bound the 
total probability of a logical error in the decoded 
C4 subblock by adding together the probabilities 
for these two sources of error, finding 



b,Jl,jAg\j-l) < Kjl,jAg\j-l) 

+C2me<T,„(l,i-l|i-l) 



(26) 



where g&{f,^f} designates whether the C4 sub- 
block is flagged or unflagged. Note that we use ba^ 
to denote the probability of a decoding error, and 
&cr,„ to denote the total probability of error, includ- 
ing the contribution from level- 1 errors in the input 
(j— l)-BPs that propagate forward. 

Now this procedure can be repeated. At level 
i, for 2 < z < we apply DECODE to the level- 

(j— 1) error and flagging probabilities to estimate 
the probability bcr^{i,j/\g\j—l) of a level-i decod- 
ing error; then we add the estimated probability for 
a level-« error in an input (j — 1)-BP to propagate 
to the measured level-z subblock, obtaining our es- 
timate of the total probability ba^{i, j/\g\j~l) of 
error for the measured (C4)'^* subblock: 



^<T„,(«,iA5|j-l) < b„Ji,jAg\j-l) 

+C2,n£<T,„(«, j-l|j-l) 



(27) 



the preparation of the j-BP is aborted if a flag is 
raised in the final decoding step, so we need only 
consider the case where there is no flag, finding 



,(j,ili-i) <6.„(i,jA-/|j-i) 



(28) 



The recursion relations from which we derive our 
upper bound on £cr,-„(i, 1) are summarized in 
Table ini 

The recursion relations for deriving an upper 
bound on the probability of error in the subblock 
teleportation are derived by exactly the same logic, 
and are summarized in Table IIIII The details are 
different because the circuit for subblock teleporta- 
tion differs from the circuit for block teleportation. 
For type-m errors in the measured level-0 qubits the 
error strength is 

sa„(0, jA-/|i~l) < 3e+{l+ci^)e„j0,j-l\j-l) , 

(29) 



where cix — 1 and ciz = 2 as in Eq. (15 1. The first 



At the top (i — j) level, there is no contribution 
from errors in the input (j— l)-BPs; furthermore. 



term bounds the probability of a fault in one of the 
two CNOT gates that act on each measured qubit 
or a fault in the measurement itself. The second 
term bounds the probability of a level-0 error in 
a (j— 1)-BP that propagates forward to the qubit 
measurement — CTx errors from two (j — l)-BPs and 
(Tz errors from three (j— l)-BPs can propagate to a 
given measured qubit. Of course, the level-0 bits 
are all unflagged. 

At each level i, where 1 < i < j — 1, we apply the 
function DECODE to the flagging and error probabili- 
ties at level i—1 to estimate the level-i flagging prob- 
ability /J^(«, — 1) and the decoding-error proba- 
biUties Sa^{i,jAg\j—l), where g^{f, ^/}. Then we 
add the estimated probability for a level-i error in 
an input (j— 1)-BP to propagate to the measured 
level-i subblock, obtaining our estimate of the to- 
tal probability s^^{i,jAg\j~l) of error for the mea- 
sured (6*4)'^* subblock: 

So-„(i,jA5|i-l) < s„^{i,jAg\j-l) 

+(l-^ci„Oe<T„(j,J-l|j-l) . 

(30) 

Repeating this procedure until reaching the top 
(i = J — 1) level, we estimate the probability of a 
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STEP 1: 

Measurements of level-0 qubits are unflagged; therefore, /ct„(0, — 1) = = ^o-,„ (0, jA/|j — 1). 

Analyzing the error propagation in the j-BP preparation circuit shown in Fig. [S] we estimate the error strength 
for the level-0 measurements in the block teleportation: 

&<.„(0,jA^/|j-l) < 4e + C2me^„^{0,j-l\j^l) , 

where C2x ~ 4 and C2z = 3. 

STEP 2: 

(a) Set i = 0. 

(6) Using the function DECODE, we map the flagging and error probabilities at level i to the flagging and 
decoding-error probabilities at level 

DECODE: { (i, jj jA/|j-l), (i, jA^/| 

^ {./■'„ (*+l,jlj-l),&^„(i+l,iA/lj-l),6..„(i+l,jA^/|j-l)} . 

(c) We propagate the level-(i-l-l) errors in the input (j— l)-BPs forward to the measured level-(i-l-l) subblocks, 
and combine them with the level-(i-l-l) decoding errors to estimate the total level-(i-l-l) noise strength: 

ba„-,{i+l,jAg\j-l) < b<T„(i+l, jAfflj-l) -f-C2me<T„(i+l, , 

where g&{f,^f} designates whether the level-(i-fl) subblock is flagged or unflagged. 
STEP 3: 

If i+1 < J — 1, increase i by 1, go to step 2(6), and repeat. 
STEP 4: 

Apply step 2{b) for i = j — 1. If the level-j block is flagged, the preparation is aborted. Thus we consider only 
the case where there is no flag, obtaining the level-j error strength in the j-BP: 

e<.„(j,j|j-l) = &c.„(j,jA-/lj-l) . 



TABLE II: Recursion equations for estimating the level-j noise strength in a j-BP. 



type-m logical error for the top-level measurement 
in the teleportation of the (C4)'*^^~^^ subblock. 
Since the preparation of the j-BP is aborted if a 
flag is raised at the top-level in any subblock tele- 
portation, we need only consider the noise strength 
■5cr„(j— 1, jA^/|j— 1) for the case where there is no 
flag. 

Finally, in a level-(j— I) subblock of the out- 
put j-BP, there are two possible sources of er- 
ror, as indicated in Fig. [7]^b). For each sub- 
block teleportation, there is an unmeasured out- 
put (C4)^(^-i' subblock and a measured (6*4)^ '^"^^ 
subblock. So far we have estimated only the er- 
ror probability So-„,(j— 1, jA^/|j— I) for the mea- 
surement; to estimate the total level-(j— I) er- 
ror strength £a^{j—^,j\j—^) for a level-(j— I) sub- 
block of the j-BP, we should add the estimate of 
the measurement-error probability to our estimate 
^cr,aij~^:j~Mj~^) of the top-level error strength 



in the unmeasured output block of the (j— I)-BP, 
finding: 



< s,„,(j,jA-/|j-i) 

+ea„(j-l,j-l|j-l) 



(31) 



Until now, our estimated error strengths 
ecr,^(i, j|j— I) {i = 0,1,2, ...,j) have been condi- 
tioned on only the acceptance of the input (j— I)- 
BPs. To find estimates of the error strengths condi- 
tioned on the acceptance of the j-BP, we divide by 
an estimate of the acceptance probability p(j|j— 1) 
as in Eq. ( 22 1 . We recall that a j-BP is accepted 



only if no flag is raised in the final decoding step 
in either of the two block teleportations or any of 
the eight subblock teleportations. Therefore, the 
probability p(j|j— I) that a j-BP is accepted, con- 
ditioned on having accepted all input (j— I)-BPs, 
satisfies 
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STEP 1; 

Measurements of level-0 qubits are unflagged; therefore, /ct„, (0, j| j — 1) = = So-„ (0, jA/|j — 1). 

Analyzing the error propagation in the j-BP preparation circuit shown in Fig. [S] we estimate the error strength 
for the level-0 measurements in the subblock teleportation: 

Sa„,(0,jA-/|j-l) <3e + (l + ci^)e.„(0,i-llj-l) , 

where cix — 1 and ciz = 2. 

STEP 2: 

(a) Set i = 0. 

(&) Using the function DECODE, we map the flagging and error probabilities at level i to the flagging and 
decoding-error probabilities at level 

DECODE: { /J„ (i, s^„^{i,jAf\j^l), s,.„ (i, jA^/lj-l)} 
^ {/J„(i+l,jlj-l),s<.„(i+l,jA/lj-l),Sa.„(j+l,jA-/|i-l)} . 

(c) We propagate the level-(i-l-l) errors in the input (j — l)-BPs forward to the measured level-(i-l-l) subblocks, 
and combine them with the level-(i-l-l) decoding errors to estimate the total level-(i-l-l) noise strength: 

s<T„,(i+l,iA3lj-l) < s<,,„(i+l, jAfflj-l) + (1 + ci„Oe<T„,(i+l,J-llj-l) , 

where g(z{f,^f} designates whether the level-(i+l) subblock is flagged or unflagged. 
STEP 3: 

If i+1 < increase i by 1, go to step 2(6), and repeat. 
STEP 4: 

If the level-(j — 1) block is flagged, the preparation is aborted. Thus we consider only the case where there is no 
flag, obtaining the error strength 3^^^^ (j — 1, jA^/jj — l) for the level-(j — 1) measurement in the subblock 
teleportation. Combining with the top-level error strength £<T^{j — l,j — l\j—l) for an output block of the 
(j— 1)-BP, we obtain our estimate of the total level-(j — 1) error strength in the J-BP: 

e<.„,(i-l,j|j-l) < s..„(j-l,jA-/|j-l) + e<..„(j-l,j-llj-l) . 



TABLE III: Recursion equations for estimating the level-(j — 1) noise strength in a j-BP. 



pU\j~1)>1- E (2/L(j,j|j-1)+8/^.Jj-1,j|j-1)) . (32) 

m^{x,z} 



VI. LEVEL REDUCTION FOR ^css 
GADGETS 

With an adequate hierarchical characterization 
of the errors in a j-BP now in hand, we can proceed 
to analyze the reliability of a circuit constructed 
from level-j Gcss gadgets protected by the code 
(6*4)'^ For the CNOT gadget, we consider the level- 
j version of the circuit shown in Fig. [T] where each 
1-BP is replaced by a j-BP, each CNOT gate denotes 
a transversal CNOT acting on two (C4)'* blocks, 
and each measurement denotes a transversal mea- 
surement of a (C4)'* block. We represent each 



J-BP preparation circuit by the equivalent circuit 
Vj-BP, SL depth-(j-fl) directed tree with noisy lo- 
cations at each coding level. Then we propagate 
errors in the effective CNOT gadget (both the errors 
due to faults in the circuit and errors in the in- 
put j-BPs) forward to the measurements inside the 
block teleportations, to estimate the measurement 
failure probability. If all decoded level-j measure- 
ments in the teleportations of the gadget's output 
blocks agree with the measurements in the ideal 
noiseless circuit, then the CNOT gadget simulates 
an ideal CNOT gate successfully; otherwise the gad- 
get fails. From our estimate of the probability that 
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a level-j measurement fails, then, we obtain an esti- 
mate of the probability of failure ecss(j) for a level- j 
CNOT gadget. 

We would like to regard ecss(j) as the noise 
strength for an effective local stochastic noise model 
that characterizes the reliability of the level-j simu- 
lated circuit. But our procedure for estimating the 
gadget failure probability still requires an impor- 
tant modification, to ensure that the probability of 
failure for a pair of consecutive gadgets is bounded 
above by (£css(j)) • Errors in a j-BP that is used 
for the teleportation of one of the input blocks in a 
CNOT gadget can propagate to the measurements in 
teleportations of both the input and output blocks, 
causing correlated logical errors in two consecutive 
gadgets. We address this problem using the trunca- 
tion method introduced in . For each fault path, 
we classify each gadget as "good" or "bad" start- 
ing at the back of the circuit, and moving toward 
the front step by step. A CNOT gadget that is fol- 
lowed by two good gadgets is declared bad if it con- 
tains a failed measurement in the teleportation of 
at least one output block; otherwise it is good. A 
CNOT gadget that is followed by one good gadget 
and one bad gadget is declared bad only if it con- 
tains a failed measurement in the teleportation of 
the output block that is an input to the following 
good gadget. A CNOT gadget that is followed by two 
bad gadgets is always declared good. 

With these definitions, the sum of the probabil- 
ities of all fault paths such that r specified level-j 
gadgets are all bad is bounded above by (ffcssO))'^- 
Furthermore, we may say that a good CNOT gadget 
simulates the ideal CNOT gate correctly. In the case 
of a good CNOT gadget followed by one bad gadget 
and one good gadget, an error in the teleportation 
of the output block that is an input block in the fol- 
lowing bad gadget can be propagated forward into 
the bad gadget. Likewise, in the case of a good 
CNOT gadget followed by two bad gadgets, errors in 
the teleportations of the two output blocks can be 
propagated forward into the following bad gadgets. 

Aside from CNOT gadgets, Gcss circuits also in- 
clude "contracted gadgets," in which state prepara- 
tion steps are combined with following CNOT gates 
to form composite gadgets, or measurement steps 
are combined with preceding CNOT gates to form 
composite gadgets fB]. These contracted gadgets 
are smaller and more reliable than CNOT gadgets; 
therefore, to estimate the effective noise strength in 
a simulated ^css circuit, we may limit our attention 



to the analysis of the CNOT gadget. 

Therefore we can prove the following lemma: 

Lemma 3. Consider a level-j simulation of a Gcss 
circuit, where elementary operations are subject to 
local stochastic noise with strength e. There is an 
equivalent level-0 Gcss circuit, producing the same 
output, which is subject to local stochastic noise with 
strength EcssU), ols specified in Table IV 



We estimate the effective noise strength ecss(j) 
of the level-j Gcss circuit using a recursive pro- 
cedure, summarized in Table |IV| that closely fol- 
lows our method for analyzing the j-BP prepara- 
tion. We represent the preparation of the four j- 
BPs in the CNOT gadget by effective depth-(j-l-l) 
circuits ^j_BP, and we propagate level-0 errors in 
the j-BPs and level-0 errors due to faults in the 
circuit forward to the qubit measurements in the 
teleportations of the outgoing (04)'^^ blocks; thus 
we obtain an upper bound on the noise strength for 
these (unflagged) measurements: 

r-..„(0, jA-/|j) <3e + C3™e.„(0, j|j) , (33) 

where r £ {c,t} designates whether the measured 
output block is the control or target block, and 
C3cx = 2, C3tz = 2, C3cz = 3, C3tx = 3. The first 
term bounds the probability of a fault in one of the 
two CNOT gates that act on each measured qubit 
or a fault in the measurement itself. The second 
term bounds the probability of a level-0 error in an 
input j-BP that propagates forward to the qubit 
measurement — CTx errors in the input control block 
and (Jj, errors in the input target block can prop- 
agate to both the output control and the output 
target block, while errors in the input target 
block and errors in the input control block do 
not propagate to the other output block. 

At each level i, where 1 < i < j, we apply the 
function DECODE to the flagging and error proba- 
bilities at level i—1 to estimate the level-i flagging 
probability Z^^, (*, j|j) and the decoding-error prob- 
abilities ^cr„(«, jAglj), where g&{f, ^/}; these prob- 
abilities are conditioned on accepting the input j- 
BPs. Then we add the estimated probability for a 
level-i error in an input j-BP to propagate to the 
measured level-i subblock, obtaining our estimate 
of the total probability '''^^^{i,jAg\j) of error for the 
measured (C4)'** subblock: 



^■<T„(«, jAc/|j) < f„^{i,jhg\j) 

+C3rm£<T„(i, j|j) 



(34) 
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STEP 1; 

Measurements of level-0 qubits are unflagged; therefore, /^„, (0, = = ?'(t„, (0, jA/|j). 

Analyzing the error propagation in the CNOT gadget shown in Fig. [T] we estimate the error strength for level-0 
measurements: 

7-<T„(0,jA^/|i) < 3e + C3on£<..„(0,j|j) , 

where cscx = C3tz = 2 and cscz = cstx = 3. 

STEP 2: 

(a) Set i = 0. 

(&) Using the function decode, we map the flagging and error probabilities at level i to the flagging and 
decoding-error probabilities at level 

DECODE: { (i, jA/j j), r,,„ (i, jA^/j j)} 

^ {/:„(i+i,j|j),?<.„,(*+i,jA/jj),?<.„,(i+i,jA-/ij)} • 

(c) We propagate the level-(i-l-l) errors in the input j-BPs forward to the measured level-(i+l) subblocks, and 
combine them with the level-(i-l-l) decoding errors to estimate the total level-(j+l) noise strength: 

where g&{f,^f} designates whether the level-(i+l) subblock is flagged or unflagged. 
STEP 3: 

If i+1 < j, increase i by 1, go to step 2(6), and repeat. 
STEP 4: 

Measurements are accepted whether or not a flag is raised in the final decoding step. Therefore, the noise 
strength for a level-j measurement is 

A Gcss gadget fails if there is a measurement error in the teleportation of at least one of its output blocks; 
therefore, 

rG{c,t} mG{x,z} 



TABLE IV: Recursion equations for estimating the effective noise strength of a level-j Gcss circuit. 



There is no postselection inside gadgets, so the top- 
level {i = j) measurement is accepted whether or 
not a flag is raised in the final decoding step. There- 
fore, the error probability for the measurement of a 
level-j block is bounded above by 

ra,AjJ\j) = r„Jj,j/\f\j)+r„Jj,jA^f\j) . (35) 

The CNOT gadget fails if there is an error in either 
the (Tx or f7z measurement in the teleportation of 
either the control or the target block. Summing over 
these four measurements, our estimate of the failure 
probability for the level-j CNOT gadget becomes: 

ecJj)< E E ^-n,(j,j|j)- (36) 

r^{c,t} m^jx.z} 



VII. THE THRESHOLD FOR Gcss 
OPERATIONS 

A. The Gcss threshold for local stochastic 
noise 

By analyzing the recursion equations, first for 
j-BPs and then for level-j Gcss gadgets, we can ob- 
tain an upper bound on the effective noise strength 
£css(i) the level-j simulation of a Gcss circuit, as 
a function of j and the fundamental noise strength 
£. Before we present these upper bounds, we discuss 
a few simple optimizations that help us improve our 
results. 

First, we discuss an improvement in the analysis 
of noise in I-BPs in section IVB I Errors in some of 
the input 0-BPs propagate not only to the output 
qubits of the I-BP but also to the measurements. 
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Since the 1-BP is accepted only if no errors are de- 
tected, we can exclude some fault paths and refine 
our estimate of the coefficient ci in Eq. (15). For 



example, a fix error in a 0-BP in an unmeasured 
block will propagate to a CTz measurement and be 
detected unless another error occurs due to a 
fault in another operation. By considering how er- 
rors propagate in the preparation circuit, we obtain 
the improved estimate 

f 16e,^(0,0)-Hl6e, if m = x 
ci — < ; (37) 

[ l-hl6e^^(0,0)-f 16e,ifm = z 

here, IGEo-^, (0,0) is an upper bound on the proba- 
bility that an error in a 0-BP propagates to cause a 
measurement error for at least one of the qubits in a 
given block; there are at most 8 such 0-BPs, and for 
each 0-BP noise of strength £cr,-„ (0,0) acts on each 
of its output qubits. Also, 16 e is an upper bound 
on the probability that a fault in the circuit causes 
a measurement error for at least one of the qubits 
in a given block; faults in any of 3 x 4 CNOT gates 
and 4 qubit measurements could cause the error. 

Secondly, we observe that the circuit in Fig. [3] 
which we use for preparing j-BPs treats the two 
types of errors differently; this is reflected in the co- 
efficients in our recursion equations where Cix ^ Ciz 
and C2x 7^ C2z- To weaken the asymmetry between 
the different types of errors, we modify our recur- 
sive preparation procedure so that for j odd we use 
the circuit in Fig. [3] but for j even we use the alter- 
native circuit in Fig. [8] in the latter, the direction 
of the CNOT gates is reversed so that the values of 
cix and ciz are switched compared to the former, 
and similarly for the values of C2x and C2z. 

Finally, we observe that the recursion equations 
may yield a smaller estimate of ScssU) if omit 
the subblock teleportations for small values of j. 
Naively, omitting the subblock teleportations is dis- 
advantageous; it makes the level-(j'— 1) subblocks of 
the j-BP noisier than the input (j— l)-BPs. But in- 
cluding the subblock teleportations means that the 
j-BP is less likely to be accepted, so that our es- 
timate of the noise strength in the postselected j- 
BP may be higher. By analyzing several different 
strategies, we find that it is beneficial to omit the 
subblock teleportations for j = 2, and include them 
for j > 3. 

Analyzing our recursion equations with these 
modifications, we find the results that are plotted 
in Fig. [9] in particular, we find that when 

e < e'q'''' EE .67 X 10^^ , (38) 




FIG. 8: An alternative preparation circuit for j'-BPs. 
Compared to the circuit in Fig. |3] the direction of the 
CNOT gates is reversed so that type-x and type-z errors 
propagate differently than in Fig. [3] 



^cssO) decreases with increasing j, thus indicating 
that £q^^ is a lower bound on the accuracy thresh- 
old for Gcss circuits. It is possible by using our 
recursion equations to prove rigorously that BcssU) 
really does become arbitrarily small for sufficiently 
large j. But a simpler method for proving the Gcss 
threshold estimate is to note that for e < Eq^^ and 
j = 10 we have ecss(lO) < 1.43 x 10"^, which is 
smaller than the lower bound 1.26 x 10^^ on the 
^^css threshold proved previously in jS], using the 
concatenated 9-qubit Bacon-Shor code. 

In addition, Fig.|9]shows the probability p(j|j—l) 
of accepting a j-BP conditioned on the acceptance 
of all input (j— l)-BPs. When the threshold condi- 
tion in Eq. (38 1 is satisfied, p(j|j— 1) converges to 



unity with increasing j, showing that the overhead 
cost of using postselection is moderate; the cost is 
dominated by the overhead for preparing j-BPs for 
small values of j, while for large j the j-BPs are 
rarely rejected. 



B. The Qcss threshold for independent 
depolarizing noise 

We can push the ^css accuracy threshold higher 
if we make further assumptions about the noise 
model. In particular, we note that our circuits are 
constructed so that errors acting on the two qubits 
in a CNOT gate always propagate to measurements 
in different blocks. We may define £1 < e by re- 
quiring that for either qubit in each CNOT gate, the 
probability of a type-m error is at most Si, for both 
m = X and m = z. If in addition the probability 
of a type-m error is at most ei for both prepara- 
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FIG. 9; On the top, the effective noise strength EcssO) 
for 5css operations protected by (C4)^-', as a function 
of the fundamental noise strength e, for j — 1, 2, 3, 4, 5. 
The straight hues serve as guides to the eye for points 
with the same value of j. For e satisfying Eq. (38 1, 
EcssO) decreases as j increases. On the bottom, the 
probability p{j\j—l) of accepting a j-BP conditioned 
on having accepted all (j— l)-BPs, as a function of the 
fundamental noise strength e, for j = 1,2,3,4,5. For 
e satisfying Eq. (381, p(i|j — 1) approaches unity as j 
increases. The different behavior of the probability of 
acceptance for j = 1,2 compared to j > 3 is due to 
omitting the subblock teleportations for j — 2 but in- 
cluding them for j > 3. 



tions and measurements, then we can replace e by 
ei in the recursion equations stated in Tables |TT]|TTT] 
and |IV| Thus the Gcss threshold condition becomes 
ei < .67 X 10-3. 

More precisely, the noisy fundamental operation 
O' that simulates the ideal operation O can be ex- 
pressed as O' = N' o O, where A/" is a completely- 
positive trace-preserving map with Kraus opera- 
tors {Nk}- In the case of the cnot gate, for 
each qubit q e {1,2} and error type m e {x,z}, 
we decompose the Kraus operators into two sets 
{Nk} = {iV^''"^} U {iV^''°"*^}, where Kraus opera- 



acting on qubit q, and Kraus operators in the sec- 
ond set do commute with cr^m (here, ^m denotes 
the complement of m). In our refined noise model, 
the total noise strength of the Kraus operators in 
the set {Njf''^^ } is at most ei for each q and m. The 
single-qubit preparations and measurements obey a 
similar requirement. 

A special case, independent depolarizing noise, 
was used in Knill's numerical simulations [3]. For 
the CNOT gate, the nontrivial Kraus operators are 
the 15 nontrivial Pauli operators, each occurring 
with probability e/15. The 8 Kraus operators 
{(Jx, o'y}'^{Ii fx, fy, Cz} induce type-x errors on the 
first qubit; similarly, 8 Kraus operators induce type- 
m errors on qubit q for each m and q. Thus, the 
probability of a type-m error acting on qubit q is 
j^e for each m and q. If we also assume that for 
each m the probability of a type-m error is at most 
in qubit preparations and measurements, then 
£i — We conclude that the Gcss threshold 

condition is 

e < e[;"^'dcpoi ^ 15 ^css ^ 1 25 X lO^^ (39) 
8 

for the case of independent depolarizing noise. 

For the independent depolarizing noise model, it 
might seem natural to assume that the probability 
of a type-m error in single-qubit operations such as 
qubit preparations and measurements is |e, since 
two of the three nontrivial single-qubit Pauli oper- 
ators induce such an error. To simplify our calcu- 
lations, we have assumed that the error probability 
is j^e instead. One way to defend this assumption 
is to note that the reliability of the preparation of 
the state |0) can be improved using the purifica- 
tion circuit shown in Fig. 



10 a similar circuit can 



be used to purify the preparation of the state |-|-). 



The preparation of |0) in Fig. 10 is accepted only if 
the measurement outcome is (7z= + 1. Conditioned 
on accepting the |0) state, then, a type-x error with 
0(e) probability can arise only from a fault in the 
CNOT gate, not from a single fault in one of the fun- 
damental preparation steps. Thus the conditional 
probability of a type-x error in the accepted state 



is 



tors in the first subset do not commute with ct-v 



(9) 



VIII. UNIVERSALITY 

Now we have shown that, if e is sufficiently small, 
Gcss gates can be simulated with arbitrarily good 
accuracy. To complete our proof of a quantum ac- 
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FIG. 10; A purification circuit for the preparation of 
the state |0): Two copies of |0) are prepared, a CNOT 
gate is apphed, and is measured on the second output 
qubit; the preparation is accepted if the measurement 
outcome is crz = + l. For independent depolarizing noise, 
the probability of a type-x error conditioned on accept- 
ing the |0) state is + O(e^). 

curacy threshold theorem based on the Fibonacci 
scheme, we must extend this protected gate set to 
a universal set. It sufRces to augment the highly 
reliable encoded ^css gates with highly reliable en- 
coded versions of the single-qubit preparations 7^|+i) 
and 'P\T) ■ 

Using the reliable encoded Qcss operations, high- 
fidelity encoded copies of and \T) can be 
distilled starting with sufficiently accurate noisy 
copies. The distillation protocol works if encoded 
copies of \T) can be prepared such that the proba- 
bility of a logical error is below 14.1% [9 ; the dis- 
tillation threshold for \+i) states is even higher [B]. 

One way to prepare encoded copies of jV') is by 
"teleportation into the code block" [3]. First, we 
prepare a Bell pair encoded using {dY^ , then we 
recursively decode one of the two encoded blocks to 
a single qubit, and finally we perform a Bell mea- 
surement on the decoded qubit and an input qubit 
prepared in the state The level-j encoded Bell 
pair can be prepared reliably if e is below the Qcss 
threshold and j is large. But the teleportation pro- 
cedure could fail either because there is an error in 
the recursively decoded state, or because a fault oc- 



curs in the preparation of IV-") or in the two-qubit 
Bell-measurement circuit. 

Let us consider the probability of error in the re- 
cursive decoding of a block to a single qubit. 
A level-1 C4 block can be decoded to a qubit using 
a circuit that contains three CNOT gates [B]. In the 
first decoding step we use level-(j— 1) CNOT gates 
to decode the {C^f^ block to a {df'^^-^^ block, in 
the second decoding step we use level-(j— 2) CNOT 
gates to decode the {C^f (^-1) block to a {df (J-^) 
block, and so on, completing the decoding to a sin- 
gle qubit after j steps. 

Each encoded CNOT gate is followed by error- 
correcting teleportation steps acting on both output 
blocks. We abort the "teleportation into the block" 
protocol if, at any stage of decoding the {C^Y^ 
block, a flag is raised in the top-level decoding of 
a measurement inside any error-correcting telepor- 
tation. (We assume that sufficiently many encoded 
Bell pairs are prepared in parallel that with high 
probability at least one ancilla preparation is ac- 
cepted.) A flag could be raised in either the 
or (Tz measurement for either output block of any 
CNOT gate at any level, so the total probability of 
a flag during decoding is 

/dccO-)<3 E E/L(*'*w- (40) 

r6{c,t} me{x,z} i=l 

A logical error, too, could occur in either the 
or cTz measurement for either output block of any 
CNOT gate at any level, or it might occur in one 
of the three level-0 CNOT gates in the final stage of 
decoding, so the joint probability of acceptance and 
a logical error in the decoded qubit is 



edccO-)<3 E E^-»(*'*^^/l*)+3e- (41) 

rg{c,t} mG{x,z} i=l 



We find then, that the probability of failure for the 
teleportation into the code block is 

eLA3)<^e+ ''f] ■ (42) 

the second term is an upper bound on the proba- 
bility of error in the decoded qubit conditioned on 



acceptance, and the first term is an upper bound 
on the probability of a fault in the level-0 telepor- 
tation circuit (the preparation, one CNOT gate, 
and two single-qubit measurements). 

It is possible by using our recursion equations 
to prove that if the fundamental noise strength e 
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is below the Gcss accuracy threshold, then, for 
all j, £anc(j) is bounded above by 6.1% for local 
stochastic noise and 6.8% for independent depolar- 
izing noise. Thus, in both cases encoded ancilla 
states can be prepared with a probability of error 
below the distillation threshold, and robust univer- 
sal quantum computation is possible. Alternatively, 
we can bypass the need to bound e^^^^{j) for all j by 
noting that for j = 10 we have eanc(lO) < 6.09% for 
local stochastic noise and ef;;^ p°'(10) < 6.76% for 
independent depolarizing noise. It was proven pre- 
viously that, for a scheme based on concatenation 
of the 9-qubit Bacon-Shor code Cg , if the strength 
of local stochastic noise is below the Gcss thresh- 
old, then for any k a (Cg)^'' block can be decoded 
with error probability at most 2.15% [7]. Therefore 
we can concatenate the Fibonacci scheme at level 
j — 10 with the Bacon-Shor scheme, and perform 
teleportation into the code block with a total proba- 
bility of a logical error no larger than 8.24% for local 
stochastic noise and 8.91% for independent depolar- 
izing noise, still below the distillation threshold. 

We conclude, then, that for the Fibonacci scheme 
the Gcss accuracy threshold is also a threshold for 
universal quantum computation. In summary, we 
have proved: 

Theorem 1 (Quantum accuracy threshold the- 
orem for the Fibonacci scheme). An ideal quan- 
tum circuit can be accurately simulated by a noisy 
quantum circuit using the Fibonacci scheme for 
fault-tolerant quantum computation if the funda- 
mental noise strength e is no larger than Sq, where 
Eq — .67 X 10^^ for local stochastic noise and 
Eq = 1.25 X 10"'^ for independent depolarizing noise. 
The ratio of the size L* of the noisy circuit to the 
size L of the ideal circuit is bounded above by a poly- 
nomial in the logarithm of L as specified in section 
below. 



cording to Eq. (Ill 



IX. OVERHEAD 

The overhead factor L* /L is polylogarithmic in 
L because, although the number of locations inside 
a level- gadget grows approximately exponentially 
with the level of concatenation j , the probability of 
a logical error in a level- gadget decreases double 
exponentially with j, if e is less than the threshold 
value Eq. 

For the Fibonacci scheme, the probability of a 
(flagged) logical error at level j scales with j ac- 



£0 {e/E.f^'^ 



(43) 



We can simulate a circuit of size L with reasonable 
accuracy if the probability of a logical error per gate 
is of order 1/i, or 



log(££o) 

log(eo/e) 



(44) 



If the size of the largest level-j gadget is bounded 
above by P (where £ is a constant), then the over- 
head factor can be expressed as 



L*/L < £J = (^(j))i°g^'/i°s^(j') 



/ log(Lso) \ 
[\og{eo/e)J 



log £/ log <p 



(45) 



This is polylogarithmic scaling as asserted in The- 
orem 1. 

To examine in more detail how the gadget size 
depends on j, we must take into account that our 
procedure for preparing a j-BP uses postselection: 
The j-BP is rejected if a flag is raised at the top level 
in either one of the two block teleportations or in 
any one of the eight subblock teleportations. Thus 
the probability of rejection scales with j like the 
probabihty of a top-level flag in a level-(j — 1) block, 
which is 0{e^^^~^^) according to Eqs. ^ and (111. 
For the purpose of estimating the overhead, we may 
imagine that a constant number (independent of j) 
of j-BP preparations are executed in parallel, where 
the constant is chosen to be large enough so that 
the probability that all of the j-BPs are rejected is 
sufficiently small. 

For example, for each j-BP used in the level-j 
CNOT gadget, suppose that M j-BPs are prepared 
in parallel. The CNOT gadget may fail because, in 
one of the j-BP preparations contained inside the 
gadget, all M of the j-BPs are rejected — this occurs 
with probabihty ©(e^^^^-^^^)). The probabihty of a 
logical error in the CNOT gadget arising from other 
sources is 0{£^^^^); thus the probability of failure 
due to the rejection of all M j-BPs is comparable 
to other contributions to the failure probability if 
we choose 



M 



m 



1.618 



(46) 



Similarly, for each input j-BP used in the prepa- 
ration of a level-(j-l-l) BP, suppose that N j-BPs 
are prepared in parallel. Then the probability that 
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all N j-BPs are rejected is 0(e^-^(J-i)). In this 
case, N should be large enough that the probability 
of failure due to rejection of all the j-BPs is compa- 
rable to the probability of an unflagged level-j log- 
ical error in an accepted j-BP, which is 0{e^^^^^'^) 
according to Eq. Therefore we choose 

^ ^ ^?r^ ^ '^^ ^ 2.618 . (47) 

The j-BP preparation circuit (for j > I) shown 
in Fig.|3]uses as input 12 (j— l)-BPs, plus another 8 
(j— l)-BPs for the final subblock teleportations. For 
our overhead estimate, we replace these 20 (j— 1)- 
BP preparations by 20N (j — 1)-BP preparations. 
In addition, the j-BP preparation circuit contains 
28 level-(j'— 1) transversal logical CNOT gates (12 
to prepare three level-j Bell pairs, 8 for the two 
block teleportations, and 8 for the eight subblock 
teleportations) plus 32 level-(j— 1) transversal mea- 
surements (16 for the two block teleportations and 
16 for the eight subblock teleportations). 

More generally, suppose that the preparation cir- 
cuit for a j-BP {j > 1) uses r (j— l)-BPs, s level- 
(j— 1) CNOT gates and t level-(j— 1) measurements. 
Furthermore, suppose that the logical CNOT gates 
and measurements are transversal, so that a level-j 
logical CNOT uses fundamental two-qubit CNOT 
gates and a level-j logical measurement uses fun- 
damental single-qubit measurements, where n is the 
block size of the code that is concatenated j times 

— 4 for the scheme we have analyzed). Let B{j) 
denote the number of 1-BP preparations, C(j) de- 
note the number of level-1 CNOT gates, and M(j) 
denote the number of level-1 measurements con- 
tained in a level-j BP preparation. These quantities 
obey the recursion relations: 

BU) = rB{j-l) , 

CU) = rC(j-l) + ^ (48) 

M(j) = rM{j-l) + tn^-'^ . 

Solving these recursion relations, we find 

B{j) - r^-i , 

C(j) = s (W-i - n^'-i) /(r - n) , (49) 
M(j) = t (r^'-i - nJ-i) /(r - n) , 

assuming r ^ n. These expressions illustrate how 
the number of locations inside a level-j gadget grows 
roughly exponentially with j, at least for the case 
of the Gcss gadgets. The distillation protocols 



that prepare high-fidelity encoded ancillas for non- 
Clifford gates use Gcss gadgets, and require a num- 
ber of rounds of that grows linearly with j; thus the 
circuit size for the non-Clifford gadgets can also be 
bounded above by an exponential in j. 

An important feature of the (non-recursive) Fi- 
bonacci scheme, not shared by the strictly recursive 
schemes analyzed in |3] , is that although the size L* 
of the noisy circuit is larger than the size L of the 
ideal circuit by a factor polylogarithmic in L, the 
"quantum depth" D* of the noisy circuit is larger 
than the depth D of the ideal circuit by only a con- 
stant factor. (That is, the number of time steps 
in the simulation is larger than the number of time 
steps in the ideal computation by a constant factor, 
if we neglect the time required for classical process- 
ing of measurement outcomes.) 

Note that the preparation of Bell pairs and the 
distillation of ancilla states are performed off-line 
and hence do not contribute to the simulation's 
depth. A transversal level-j logical CNOT gate can 
be executed in a single time step for any value 
of j. The quantum measurements comprising the 
transversal measurement of a level-j block can also 
be performed in a single time step, but to deter- 
mine the outcome of the encoded measurement clas- 
sical processing of the measurement outcomes is re- 
quired, which can be executed by a classical circuit 
with depth linear in j. 

Whenever a non-Clifford gate is teleported, the 
outcome of the encoded measurement is needed to 
determine what Clifford gate should be applied in 
the next step. If classical processing is much faster 
than quantum processing, then we may neglect the 
time needed for the classical decoding of measured 
blocks; under this assumption, non-Clifford gates as 
well as Clifford gates can be simulated in constant 
depth. 

We will not present here a more detailed anal- 
ysis of the resource requirements for the Fibonacci 
scheme, but we note that estimates based on numer- 
ical simulations are discussed in the Supplementary 
Information in Ref. [1]. 



X. CONCLUSION 

We can expect the accuracy of quantum comput- 
ing hardware to improve steadily. Even so, over- 
coming the limiting effects of noise will pose a chal- 
lenge to the builders of quantum computers well 
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into the future, and fault-tolerant simulations will 
be needed to operate large-scale quantum comput- 
ers reliably. There are two central questions about 
fault-tolerant schemes: how much noise can be tol- 
erated and how does the overhead cost depend on 
the strength of the noise? 

Much can be learned about the answers to 
these questions through numerical studies of fault- 
tolerant circuits. But it is also useful to prove rig- 
orous statements about the performance of fault- 
tolerant methods. For one thing, a long computa- 
tion might fail due to rare noise fluctuations; the 
probability of rare events could be seriously under- 
estimated in numerical simulations, so that rigorous 
upper bounds on the probability are valuable. Fur- 
thermore, rigorous analysis can deepen our concep- 
tual understanding regarding which approaches to 
fault tolerance are most effective, and inspire new 
proposals for fault-tolerant circuit design. 

This paper, like the earlier paper [6], provides a 
rigorous analysis of a clever approach to quantum 
fault tolerance introduced by Knill [4]; in [6] we an- 
alyzed Knill's "postselection scheme" and here we 
have analyzed his "Fibonacci scheme," which has a 
much more favorable overhead cost than the post- 
selection scheme. In each case we have established 
a rigorous lower bound on the quantum accuracy 
threshold that is significantly higher than the pre- 
viously proven lower bounds for other fault-tolerant 
schemes, though still about an order of magnitude 
below Knill's numerical estimates. (High numerical 
estimates of the accuracy threshold have also been 
found in [TU], though for that scheme a fully rigor- 
ous analysis has not yet been done.) 

For the Fibonacci scheme, our rigorous lower 
bound on the threshold noise strength ea is .67 x 
10~^ for local stochastic noise and 1.25 x 10^"^ for 
independent depolarizing noise. Our previously de- 



rived lower bound for the postselection scheme was 
1.04 X 10"'^, but that result applies to a modified 
noise model with weaker noise correlations than 
local stochastic noise and stronger noise correla- 
tions than independent depolarizing noise. All of 
these results notably improve on the lower bound 
1.94 X 10"** for local stochastic noise found earlier 
for the concatenated Bacon-Shor scheme [S]. 

Our proof of the threshold theorem uses some 
new methods that might be fruitfully applied else- 
where. We have introduced a new wrinkle on "level 
reduction" by characterizing the noise in recursively 
prepared Bell pairs using a hierarchical effective 
circuit that produces the same output as the ac- 
tual Bell-pair preparation circuit. We have also de- 
veloped tools for analyzing the recursive decoding 
of concatenated code blocks assisted by flags that 
point to probable error locations. In a separate 
paper, we have shown that flagging can be help- 
fully invoked in schemes designed to protect against 
highly biased noise models, where type-z errors are 
far more likely than type-x errors |llj . 

This paper supersedes an earlier discussion |12j 
where a recursive scheme which used flagging was 
studied. The analysis reported in [T^] was flawed, 
and the threshold estimate derived there was incor- 
rect. 
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